xnu-1228.5.20.tar.gz

[apple/xnu.git] / bsd / hfs / hfs_attrlist.c

/*
 * Copyright (c) 2000-2007 Apple Inc. All rights reserved.
 *
 * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
 * 
 * This file contains Original Code and/or Modifications of Original Code
 * as defined in and that are subject to the Apple Public Source License
 * Version 2.0 (the 'License'). You may not use this file except in
 * compliance with the License. The rights granted to you under the License
 * may not be used to create, or enable the creation or redistribution of,
 * unlawful or unlicensed copies of an Apple operating system, or to
 * circumvent, violate, or enable the circumvention or violation of, any
 * terms of an Apple operating system software license agreement.
 * 
 * Please obtain a copy of the License at
 * http://www.opensource.apple.com/apsl/ and read it before using this file.
 * 
 * The Original Code and all software distributed under the License are
 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 * Please see the License for the specific language governing rights and
 * limitations under the License.
 * 
 * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
 */

/*
 * hfs_attrlist.c - HFS attribute list processing
 *
 * Copyright (c) 1998-2002, Apple Computer, Inc.  All Rights Reserved.
 */

#include <sys/param.h>
#include <sys/systm.h>
#include <sys/kernel.h>
#include <sys/malloc.h>
#include <sys/attr.h>
#include <sys/stat.h>
#include <sys/unistd.h>
#include <sys/mount_internal.h>
#include <sys/kauth.h>

#include <kern/locks.h>

#include "hfs.h"
#include "hfs_cnode.h"
#include "hfs_mount.h"
#include "hfs_dbg.h"
#include "hfs_attrlist.h"
#include "hfs_btreeio.h"

/* Packing routines: */

static void packnameattr(struct attrblock *abp, struct vnode *vp,
                        const u_int8_t *name, int namelen);

static void packcommonattr(struct attrblock *abp, struct hfsmount *hfsmp,
                        struct vnode *vp, struct cat_desc * cdp,
                        struct cat_attr * cap, struct proc *p);

static void packfileattr(struct attrblock *abp, struct hfsmount *hfsmp,
                        struct cat_attr *cattrp, struct cat_fork *datafork,
                        struct cat_fork *rsrcfork);

static void packdirattr(struct attrblock *abp, struct hfsmount *hfsmp,
                        struct vnode *vp, struct cat_desc * descp,
                        struct cat_attr * cattrp);

static u_int32_t hfs_real_user_access(vnode_t vp, vfs_context_t ctx);

/*
 * readdirattr operation will return attributes for the items in the
 * directory specified. 
 *
 * It does not do . and .. entries. The problem is if you are at the root of the
 * hfs directory and go to .. you could be crossing a mountpoint into a
 * different (ufs) file system. The attributes that apply for it may not 
 * apply for the file system you are doing the readdirattr on. To make life 
 * simpler, this call will only return entries in its directory, hfs like.
 */
__private_extern__
int
hfs_vnop_readdirattr(ap)
        struct vnop_readdirattr_args /* {
                struct vnode *a_vp;
                struct attrlist *a_alist;
                struct uio *a_uio;
                u_long a_maxcount;
                u_long a_options;
                u_long *a_newstate;
                int *a_eofflag;
                u_long *a_actualcount;
                vfs_context_t a_context;
        } */ *ap;
{
        struct vnode *dvp = ap->a_vp;
        struct cnode *dcp;
        struct hfsmount * hfsmp;
        struct attrlist *alist = ap->a_alist;
        uio_t uio = ap->a_uio;
        int maxcount = ap->a_maxcount;
        struct proc *p = vfs_context_proc(ap->a_context);
        u_int32_t fixedblocksize;
        u_int32_t maxattrblocksize;
        u_int32_t currattrbufsize;
        void *attrbufptr = NULL;
        void *attrptr;
        void *varptr;
        struct attrblock attrblk;
        int error = 0;
        int index = 0;
        int i, dir_entries = 0;
        struct cat_desc *lastdescp = NULL;
        struct cat_entrylist *ce_list = NULL;
        directoryhint_t *dirhint = NULL;
        unsigned int tag;
        int maxentries;
        int lockflags;

        *(ap->a_actualcount) = 0;
        *(ap->a_eofflag) = 0;

        /* Check for invalid options and buffer space. */
        if (((ap->a_options & ~(FSOPT_NOINMEMUPDATE | FSOPT_NOFOLLOW)) != 0) ||
            (uio_resid(uio) <= 0) || (uio_iovcnt(uio) > 1) || (maxcount <= 0)) {
                return (EINVAL);
        }
        /*
         * Reject requests for unsupported attributes.
         */
        if ((alist->bitmapcount != ATTR_BIT_MAP_COUNT) ||
            (alist->commonattr & ~HFS_ATTR_CMN_VALID) ||
            (alist->volattr  != 0) ||
            (alist->dirattr & ~HFS_ATTR_DIR_VALID) ||
            (alist->fileattr & ~HFS_ATTR_FILE_VALID) ||
            (alist->forkattr != 0)) {
                return (EINVAL);
        }
        /*
         * Take an exclusive directory lock since we manipulate the directory hints
         */
        if ((error = hfs_lock(VTOC(dvp), HFS_EXCLUSIVE_LOCK))) {
                return (error);
        }
        dcp = VTOC(dvp);
        hfsmp = VTOHFS(dvp);

        dir_entries = dcp->c_entries;

        /* Extract directory index and tag (sequence number) from uio_offset */
        index = uio_offset(uio) & HFS_INDEX_MASK;
        tag = uio_offset(uio) & ~HFS_INDEX_MASK;
        if ((index + 1) > dir_entries) {
                *(ap->a_eofflag) = 1;
                error = 0;
                goto exit2;
        }

        /* Get a buffer to hold packed attributes. */
        fixedblocksize = (sizeof(u_int32_t) + hfs_attrblksize(alist)); /* 4 bytes for length */
        maxattrblocksize = fixedblocksize;
        if (alist->commonattr & ATTR_CMN_NAME) 
                maxattrblocksize += kHFSPlusMaxFileNameBytes + 1;
        MALLOC(attrbufptr, void *, maxattrblocksize, M_TEMP, M_WAITOK);
        attrptr = attrbufptr;
        varptr = (char *)attrbufptr + fixedblocksize;  /* Point to variable-length storage */

        /* Get a detached directory hint (cnode must be locked exclusive) */    
        dirhint = hfs_getdirhint(dcp, ((index - 1) & HFS_INDEX_MASK) | tag, TRUE);

        /* Hide tag from catalog layer. */
        dirhint->dh_index &= HFS_INDEX_MASK;
        if (dirhint->dh_index == HFS_INDEX_MASK) {
                dirhint->dh_index = -1;
        }

        /*
         * Obtain a list of catalog entries and pack their attributes until
         * the output buffer is full or maxcount entries have been packed.
         */

        /*
         * Constrain our list size.
         */
        maxentries = uio_resid(uio) / (fixedblocksize + HFS_AVERAGE_NAME_SIZE);
        maxentries = min(maxentries, dcp->c_entries - index);
        maxentries = min(maxentries, maxcount);
        maxentries = min(maxentries, MAXCATENTRIES);
        if (maxentries < 1) {
                error = EINVAL;
                goto exit2;
        }

        /* Initialize a catalog entry list. */
        MALLOC(ce_list, struct cat_entrylist *, CE_LIST_SIZE(maxentries), M_TEMP, M_WAITOK);
        bzero(ce_list, CE_LIST_SIZE(maxentries));
        ce_list->maxentries = maxentries;

        /*
         * Populate the ce_list from the catalog file.
         */
        lockflags = hfs_systemfile_lock(hfsmp, SFL_CATALOG, HFS_SHARED_LOCK);
         
        error = cat_getentriesattr(hfsmp, dirhint, ce_list);
        /* Don't forget to release the descriptors later! */

        hfs_systemfile_unlock(hfsmp, lockflags);

        if (error == ENOENT) {
                *(ap->a_eofflag) = TRUE;
                error = 0;
        }
        if (error) {
                goto exit1;
        }

        /*
         * Drop the directory lock so we don't deadlock when we:
         *   - acquire a child cnode lock
         *   - make calls to vnode_authorize()
         *   - make calls to kauth_cred_ismember_gid()
         */
        hfs_unlock(dcp);
        dcp = NULL;

        /* Process the catalog entries. */
        for (i = 0; i < (int)ce_list->realentries; ++i) {
                struct cnode *cp = NULL;
                struct vnode *vp = NULL;
                struct cat_desc * cdescp;
                struct cat_attr * cattrp;
                struct cat_fork c_datafork;
                struct cat_fork c_rsrcfork;

                bzero(&c_datafork, sizeof(c_datafork));
                bzero(&c_rsrcfork, sizeof(c_rsrcfork));
                cdescp = &ce_list->entry[i].ce_desc;
                cattrp = &ce_list->entry[i].ce_attr;
                c_datafork.cf_size   = ce_list->entry[i].ce_datasize;
                c_datafork.cf_blocks = ce_list->entry[i].ce_datablks;
                c_rsrcfork.cf_size   = ce_list->entry[i].ce_rsrcsize;
                c_rsrcfork.cf_blocks = ce_list->entry[i].ce_rsrcblks;

                if ((alist->commonattr & ATTR_CMN_USERACCESS) &&
                    (cattrp->ca_recflags & kHFSHasSecurityMask)) {
                        /*
                         * Obtain vnode for our vnode_authorize() calls.
                         */
                        if (hfs_vget(hfsmp, cattrp->ca_fileid, &vp, 0) != 0) {
                                vp = NULL;
                        }
                } else if (!(ap->a_options & FSOPT_NOINMEMUPDATE)) {
                        /* Get in-memory cnode data (if any). */
                        vp = hfs_chash_getvnode(hfsmp->hfs_raw_dev, cattrp->ca_fileid, 0, 0);
                }
                if (vp != NULL) {
                        cp = VTOC(vp);
                        /* Only use cnode's decriptor for non-hardlinks */
                        if (!(cp->c_flag & C_HARDLINK))
                                cdescp = &cp->c_desc;
                        cattrp = &cp->c_attr;
                        if (cp->c_datafork) {
                                c_datafork.cf_size   = cp->c_datafork->ff_size;
                                c_datafork.cf_blocks = cp->c_datafork->ff_blocks;
                        }
                        if (cp->c_rsrcfork) {
                                c_rsrcfork.cf_size   = cp->c_rsrcfork->ff_size;
                                c_rsrcfork.cf_blocks = cp->c_rsrcfork->ff_blocks;
                        }
                        /* All done with cnode. */
                        hfs_unlock(cp);
                        cp = NULL;
                }

                *((u_int32_t *)attrptr) = 0; 
                attrptr = ((u_int32_t *)attrptr) + 1;
                attrblk.ab_attrlist = alist;
                attrblk.ab_attrbufpp = &attrptr;
                attrblk.ab_varbufpp = &varptr;
                attrblk.ab_flags = 0;
                attrblk.ab_blocksize = maxattrblocksize;
                attrblk.ab_context = ap->a_context;

                /* Pack catalog entries into attribute buffer. */
                hfs_packattrblk(&attrblk, hfsmp, vp, cdescp, cattrp, &c_datafork, &c_rsrcfork, p);
                currattrbufsize = ((char *)varptr - (char *)attrbufptr);
        
                /* All done with vnode. */
                if (vp != NULL) {
                        vnode_put(vp);
                        vp = NULL;
                }

                /* Make sure there's enough buffer space remaining. */
                // LP64todo - fix this!
                if (uio_resid(uio) < 0 || currattrbufsize > (u_int32_t)uio_resid(uio)) {
                        break;
                } else {
                        *((u_int32_t *)attrbufptr) = currattrbufsize;
                        error = uiomove((caddr_t)attrbufptr, currattrbufsize, uio);
                        if (error != E_NONE) {
                                break;
                        }
                        attrptr = attrbufptr;
                        /* Point to variable-length storage */
                        varptr = (char *)attrbufptr + fixedblocksize; 
                        /* Save the last valid catalog entry */
                        lastdescp = &ce_list->entry[i].ce_desc;
                        index++;
                        *ap->a_actualcount += 1;

                        /* Termination checks */
                        if ((--maxcount <= 0) ||
                            // LP64todo - fix this!
                            uio_resid(uio) < 0 ||
                            ((u_int32_t)uio_resid(uio) < (fixedblocksize + HFS_AVERAGE_NAME_SIZE)) ||
                            (index >= dir_entries)) {
                                break;
                        }
                }
        } /* for each catalog entry */

        /* For small directories, check if we're all done. */
        if (*ap->a_actualcount == (u_long)dir_entries) {
                *(ap->a_eofflag) = TRUE;
        }

        /* If we skipped catalog entries for reserved files that should
         * not be listed in namespace, update the index accordingly.
         */
        if (ce_list->skipentries) {
                index += ce_list->skipentries;
                ce_list->skipentries = 0;
        }

        /* If there are more entries then save the last name. */
        if (index < dir_entries
        &&  !(*(ap->a_eofflag))
        &&  lastdescp != NULL) {

                /* Remember last entry */
                if ((dirhint->dh_desc.cd_flags & CD_HASBUF) &&
                    (dirhint->dh_desc.cd_nameptr != NULL)) {
                        dirhint->dh_desc.cd_flags &= ~CD_HASBUF;
                        vfs_removename((const char *)dirhint->dh_desc.cd_nameptr);
                }
                dirhint->dh_desc.cd_namelen = lastdescp->cd_namelen;
                dirhint->dh_desc.cd_nameptr = (const u_int8_t *)
                vfs_addname((const char *)lastdescp->cd_nameptr, lastdescp->cd_namelen, 0, 0);
                dirhint->dh_desc.cd_flags |= CD_HASBUF;
                dirhint->dh_index = index - 1;
                dirhint->dh_desc.cd_cnid = lastdescp->cd_cnid;
                dirhint->dh_desc.cd_hint = lastdescp->cd_hint;
                dirhint->dh_desc.cd_encoding = lastdescp->cd_encoding;
        } else {
                /* No more entries. */
                *(ap->a_eofflag) = TRUE;
        }
                
        /* All done with the catalog descriptors. */
        for (i = 0; i < (int)ce_list->realentries; ++i)
                cat_releasedesc(&ce_list->entry[i].ce_desc);
        ce_list->realentries = 0;

        (void) hfs_lock(VTOC(dvp), HFS_FORCE_LOCK);
        dcp = VTOC(dvp);

exit1:
        /* Pack directory index and tag into uio_offset. */
        while (tag == 0) tag = (++dcp->c_dirhinttag) << HFS_INDEX_BITS; 
        uio_setoffset(uio, index | tag);
        dirhint->dh_index |= tag;

exit2:
        *ap->a_newstate = dcp->c_dirchangecnt;

        /* Drop directory hint on error or if there are no more entries */
        if (dirhint) {
                if ((error != 0) || (index >= dir_entries) || *(ap->a_eofflag))
                        hfs_reldirhint(dcp, dirhint);
                else
                        hfs_insertdirhint(dcp, dirhint);
        }
        if (attrbufptr)
                FREE(attrbufptr, M_TEMP);
        if (ce_list)
                FREE(ce_list, M_TEMP);

        hfs_unlock(dcp);
        return (error);
}


/*==================== Attribute list support routines ====================*/

/*
 * Pack cnode attributes into an attribute block.
 */
 __private_extern__
void
hfs_packattrblk(struct attrblock *abp,
                struct hfsmount *hfsmp,
                struct vnode *vp,
                struct cat_desc *descp,
                struct cat_attr *attrp,
                struct cat_fork *datafork,
                struct cat_fork *rsrcfork,
                struct proc *p)
{
        struct attrlist *attrlistp = abp->ab_attrlist;

        if (attrlistp->commonattr)
                packcommonattr(abp, hfsmp, vp, descp, attrp, p);

        if (attrlistp->dirattr && S_ISDIR(attrp->ca_mode))
                packdirattr(abp, hfsmp, vp, descp,attrp);

        if (attrlistp->fileattr && !S_ISDIR(attrp->ca_mode))
                packfileattr(abp, hfsmp, attrp, datafork, rsrcfork);
}


static char*
mountpointname(struct mount *mp)
{
        size_t namelength = strlen(mp->mnt_vfsstat.f_mntonname);
        int foundchars = 0;
        char *c;
        
        if (namelength == 0)
                return (NULL);
        
        /*
         * Look backwards through the name string, looking for
         * the first slash encountered (which must precede the
         * last part of the pathname).
         */
        for (c = mp->mnt_vfsstat.f_mntonname + namelength - 1;
             namelength > 0; --c, --namelength) {
                if (*c != '/') {
                        foundchars = 1;
                } else if (foundchars) {
                        return (c + 1);
                }
        }
        
        return (mp->mnt_vfsstat.f_mntonname);
}


static void
packnameattr(
        struct attrblock *abp,
        struct vnode *vp,
        const u_int8_t *name,
        int namelen)
{
        void *varbufptr;
        struct attrreference * attr_refptr;
        char *mpname;
        size_t mpnamelen;
        u_int32_t attrlength;
        u_int8_t empty = 0;
        
        /* A cnode's name may be incorrect for the root of a mounted
         * filesystem (it can be mounted on a different directory name
         * than the name of the volume, such as "blah-1").  So for the
         * root directory, it's best to return the last element of the
         location where the volume's mounted:
         */
        if ((vp != NULL) && vnode_isvroot(vp) &&
            (mpname = mountpointname(vnode_mount(vp)))) {
                mpnamelen = strlen(mpname);
                
                /* Trim off any trailing slashes: */
                while ((mpnamelen > 0) && (mpname[mpnamelen-1] == '/'))
                        --mpnamelen;

                /* If there's anything left, use it instead of the volume's name */
                if (mpnamelen > 0) {
                        name = (u_int8_t *)mpname;
                        namelen = mpnamelen;
                }
        }
        if (name == NULL) {
                name = &empty;
                namelen = 0;
        }

        varbufptr = *abp->ab_varbufpp;
        attr_refptr = (struct attrreference *)(*abp->ab_attrbufpp);

        attrlength = namelen + 1;
        attr_refptr->attr_dataoffset = (char *)varbufptr - (char *)attr_refptr;
        attr_refptr->attr_length = attrlength;
        (void) strncpy((char *)varbufptr, (const char *) name, attrlength);
        /*
         * Advance beyond the space just allocated and
         * round up to the next 4-byte boundary:
         */
        varbufptr = ((char *)varbufptr) + attrlength + ((4 - (attrlength & 3)) & 3);
        ++attr_refptr;

        *abp->ab_attrbufpp = attr_refptr;
        *abp->ab_varbufpp = varbufptr;
}


static void
packcommonattr(
        struct attrblock *abp,
        struct hfsmount *hfsmp,
        struct vnode *vp,
        struct cat_desc * cdp,
        struct cat_attr * cap,
        struct proc *p)
{
        attrgroup_t attr = abp->ab_attrlist->commonattr;
        struct mount *mp = HFSTOVFS(hfsmp);
        void *attrbufptr = *abp->ab_attrbufpp;
        void *varbufptr = *abp->ab_varbufpp;
        boolean_t is_64_bit = proc_is64bit(p);
        uid_t cuid = 1;
        int isroot = 0;

        if (attr & (ATTR_CMN_OWNERID | ATTR_CMN_GRPID)) {
                cuid = kauth_cred_getuid(proc_ucred(p));
                isroot = cuid == 0;
        }
        
        if (ATTR_CMN_NAME & attr) {
                packnameattr(abp, vp, cdp->cd_nameptr, cdp->cd_namelen);
                attrbufptr = *abp->ab_attrbufpp;
                varbufptr = *abp->ab_varbufpp;
        }
        if (ATTR_CMN_DEVID & attr) {
                *((dev_t *)attrbufptr) = hfsmp->hfs_raw_dev;
                attrbufptr = ((dev_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_FSID & attr) {
                fsid_t fsid;
                
                fsid.val[0] = (long)hfsmp->hfs_raw_dev;
                fsid.val[1] = (long)vfs_typenum(mp);
                *((fsid_t *)attrbufptr) = fsid;
                attrbufptr = ((fsid_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_OBJTYPE & attr) {
                *((fsobj_type_t *)attrbufptr) = IFTOVT(cap->ca_mode);
                attrbufptr = ((fsobj_type_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_OBJTAG & attr) {
                *((fsobj_tag_t *)attrbufptr) = VT_HFS;
                attrbufptr = ((fsobj_tag_t *)attrbufptr) + 1;
        }
        /*
         * Exporting file IDs from HFS Plus:
         *
         * For "normal" files the c_fileid is the same value as the
         * c_cnid.  But for hard link files, they are different - the
         * c_cnid belongs to the active directory entry (ie the link)
         * and the c_fileid is for the actual inode (ie the data file).
         *
         * The stat call (getattr) will always return the c_fileid
         * and Carbon APIs, which are hardlink-ignorant, will always
         * receive the c_cnid (from getattrlist).
         */
        if (ATTR_CMN_OBJID & attr) {
                ((fsobj_id_t *)attrbufptr)->fid_objno = cdp->cd_cnid;
                ((fsobj_id_t *)attrbufptr)->fid_generation = 0;
                attrbufptr = ((fsobj_id_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_OBJPERMANENTID & attr) {
                ((fsobj_id_t *)attrbufptr)->fid_objno = cdp->cd_cnid;
                ((fsobj_id_t *)attrbufptr)->fid_generation = 0;
                attrbufptr = ((fsobj_id_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_PAROBJID & attr) {
                ((fsobj_id_t *)attrbufptr)->fid_objno = cdp->cd_parentcnid;
                ((fsobj_id_t *)attrbufptr)->fid_generation = 0;
                attrbufptr = ((fsobj_id_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_SCRIPT & attr) {
                *((text_encoding_t *)attrbufptr) = cdp->cd_encoding;
                attrbufptr = ((text_encoding_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_CRTIME & attr) {
            if (is_64_bit) {
            ((struct user_timespec *)attrbufptr)->tv_sec = cap->ca_itime;
            ((struct user_timespec *)attrbufptr)->tv_nsec = 0;
                        attrbufptr = ((struct user_timespec *)attrbufptr) + 1;
            }
            else {
            ((struct timespec *)attrbufptr)->tv_sec = cap->ca_itime;
            ((struct timespec *)attrbufptr)->tv_nsec = 0;
                        attrbufptr = ((struct timespec *)attrbufptr) + 1;
            }
        }
        if (ATTR_CMN_MODTIME & attr) {
            if (is_64_bit) {
             ((struct user_timespec *)attrbufptr)->tv_sec = cap->ca_mtime;
             ((struct user_timespec *)attrbufptr)->tv_nsec = 0;
                         attrbufptr = ((struct user_timespec *)attrbufptr) + 1;
            }
            else {
            ((struct timespec *)attrbufptr)->tv_sec = cap->ca_mtime;
            ((struct timespec *)attrbufptr)->tv_nsec = 0;
                        attrbufptr = ((struct timespec *)attrbufptr) + 1;
            }
        }
        if (ATTR_CMN_CHGTIME & attr) {
            if (is_64_bit) {
            ((struct user_timespec *)attrbufptr)->tv_sec = cap->ca_ctime;
            ((struct user_timespec *)attrbufptr)->tv_nsec = 0;
                        attrbufptr = ((struct user_timespec *)attrbufptr) + 1;
            }
            else {
            ((struct timespec *)attrbufptr)->tv_sec = cap->ca_ctime;
            ((struct timespec *)attrbufptr)->tv_nsec = 0;
                        attrbufptr = ((struct timespec *)attrbufptr) + 1;
            }
        }
        if (ATTR_CMN_ACCTIME & attr) {
            if (is_64_bit) {
            ((struct user_timespec *)attrbufptr)->tv_sec = cap->ca_atime;
            ((struct user_timespec *)attrbufptr)->tv_nsec = 0;
                        attrbufptr = ((struct user_timespec *)attrbufptr) + 1;
            }
            else {
            ((struct timespec *)attrbufptr)->tv_sec = cap->ca_atime;
            ((struct timespec *)attrbufptr)->tv_nsec = 0;
                        attrbufptr = ((struct timespec *)attrbufptr) + 1;
            }
        }
        if (ATTR_CMN_BKUPTIME & attr) {
            if (is_64_bit) {
            ((struct user_timespec *)attrbufptr)->tv_sec = cap->ca_btime;
            ((struct user_timespec *)attrbufptr)->tv_nsec = 0;
                        attrbufptr = ((struct user_timespec *)attrbufptr) + 1;
            }
            else {
            ((struct timespec *)attrbufptr)->tv_sec = cap->ca_btime;
            ((struct timespec *)attrbufptr)->tv_nsec = 0;
                        attrbufptr = ((struct timespec *)attrbufptr) + 1;
            }
        }
        if (ATTR_CMN_FNDRINFO & attr) {
                bcopy(&cap->ca_finderinfo, attrbufptr, sizeof(u_int8_t) * 32);
                /* Don't expose a symlink's private type/creator. */
                if (S_ISLNK(cap->ca_mode)) {
                        struct FndrFileInfo *fip;

                        fip = (struct FndrFileInfo *)attrbufptr;
                        fip->fdType = 0;
                        fip->fdCreator = 0;
                }
                attrbufptr = (char *)attrbufptr + sizeof(u_int8_t) * 32;
        }
        if (ATTR_CMN_OWNERID & attr) {
                uid_t nuid = cap->ca_uid;

                if (!isroot) {
                        if (((unsigned int)vfs_flags(HFSTOVFS(hfsmp))) & MNT_UNKNOWNPERMISSIONS)
                                nuid = cuid;
                        else if (nuid == UNKNOWNUID)
                                nuid = cuid;
                }

                *((uid_t *)attrbufptr) = nuid;
                attrbufptr = ((uid_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_GRPID & attr) {
                gid_t ngid = cap->ca_gid;

                if (!isroot) {
                        gid_t cgid = kauth_cred_getgid(proc_ucred(p));
                        if (((unsigned int)vfs_flags(HFSTOVFS(hfsmp))) & MNT_UNKNOWNPERMISSIONS)
                                ngid = cgid;
                        else if (ngid == UNKNOWNUID)
                                ngid = cgid;
                }

                *((gid_t *)attrbufptr) = ngid;
                attrbufptr = ((gid_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_ACCESSMASK & attr) {
                /*
                 * [2856576]  Since we are dynamically changing the owner, also
                 * effectively turn off the set-user-id and set-group-id bits,
                 * just like chmod(2) would when changing ownership.  This prevents
                 * a security hole where set-user-id programs run as whoever is
                 * logged on (or root if nobody is logged in yet!)
                 */
                *((u_int32_t *)attrbufptr) = (cap->ca_uid == UNKNOWNUID) ?
                        cap->ca_mode & ~(S_ISUID | S_ISGID) : cap->ca_mode;
                attrbufptr = ((u_int32_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_FLAGS & attr) {
                *((u_int32_t *)attrbufptr) = cap->ca_flags;
                attrbufptr = ((u_int32_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_USERACCESS & attr) {
                u_int32_t user_access;

                /* Take the long path when we have an ACL */
                if ((vp != NULLVP) && (cap->ca_recflags & kHFSHasSecurityMask)) {
                        user_access = hfs_real_user_access(vp, abp->ab_context);
                } else {
                        user_access = DerivePermissionSummary(cap->ca_uid, cap->ca_gid,
                                          cap->ca_mode, mp, proc_ucred(current_proc()), 0);
                }
                /* Also consider READ-ONLY file system. */
                if (vfs_flags(mp) & MNT_RDONLY) {
                        user_access &= ~W_OK;
                }
                /* Locked objects are not writable either */
                if ((cap->ca_flags & UF_IMMUTABLE) && (vfs_context_suser(abp->ab_context) != 0))
                        user_access &= ~W_OK;
                if ((cap->ca_flags & SF_IMMUTABLE) && (vfs_context_suser(abp->ab_context) == 0))
                        user_access &= ~W_OK;

                *((u_int32_t *)attrbufptr) = user_access;
                attrbufptr = ((u_int32_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_FILEID & attr) {
                *((u_int64_t *)attrbufptr) = cap->ca_fileid;
                attrbufptr = ((u_int64_t *)attrbufptr) + 1;
        }
        if (ATTR_CMN_PARENTID & attr) {
                *((u_int64_t *)attrbufptr) = cdp->cd_parentcnid;
                attrbufptr = ((u_int64_t *)attrbufptr) + 1;
        }
        
        *abp->ab_attrbufpp = attrbufptr;
        *abp->ab_varbufpp = varbufptr;
}

static void
packdirattr(
        struct attrblock *abp,
        struct hfsmount *hfsmp,
        struct vnode *vp,
        struct cat_desc * descp,
        struct cat_attr * cattrp)
{
        attrgroup_t attr = abp->ab_attrlist->dirattr;
        void *attrbufptr = *abp->ab_attrbufpp;
        u_int32_t entries;

        /*
         * The DIR_LINKCOUNT is the count of real directory hard links.
         * (i.e. its not the sum of the implied "." and ".." references
         *  typically used in stat's st_nlink field)
         */
        if (ATTR_DIR_LINKCOUNT & attr) {
                *((u_int32_t *)attrbufptr) = cattrp->ca_linkcount;
                attrbufptr = ((u_int32_t *)attrbufptr) + 1;
        }
        if (ATTR_DIR_ENTRYCOUNT & attr) {
                entries = cattrp->ca_entries;

                if (descp->cd_parentcnid == kHFSRootParentID) {
                        if (hfsmp->hfs_private_desc[FILE_HARDLINKS].cd_cnid != 0)
                                --entries;          /* hide private dir */
                        if (hfsmp->hfs_private_desc[DIR_HARDLINKS].cd_cnid != 0)
                                --entries;          /* hide private dir */
                        if (hfsmp->jnl ||
                            ((hfsmp->vcbAtrb & kHFSVolumeJournaledMask) &&
                             (hfsmp->hfs_flags & HFS_READ_ONLY)))
                                entries -= 2;   /* hide the journal files */
                }

                *((u_int32_t *)attrbufptr) = entries;
                attrbufptr = ((u_int32_t *)attrbufptr) + 1;
        }
        if (ATTR_DIR_MOUNTSTATUS & attr) {
                if (vp != NULL && vnode_mountedhere(vp) != NULL)
                        *((u_int32_t *)attrbufptr) = DIR_MNTSTATUS_MNTPOINT;
                else
                        *((u_int32_t *)attrbufptr) = 0;
                attrbufptr = ((u_int32_t *)attrbufptr) + 1;
        }
        *abp->ab_attrbufpp = attrbufptr;
}

static void
packfileattr(
        struct attrblock *abp,
        struct hfsmount *hfsmp,
        struct cat_attr *cattrp,
        struct cat_fork *datafork,
        struct cat_fork *rsrcfork)
{
        attrgroup_t attr = abp->ab_attrlist->fileattr;
        void *attrbufptr = *abp->ab_attrbufpp;
        void *varbufptr = *abp->ab_varbufpp;
        u_int32_t allocblksize;

        allocblksize = HFSTOVCB(hfsmp)->blockSize;

        if (ATTR_FILE_LINKCOUNT & attr) {
                *((u_int32_t *)attrbufptr) = cattrp->ca_linkcount;
                attrbufptr = ((u_int32_t *)attrbufptr) + 1;
        }
        if (ATTR_FILE_TOTALSIZE & attr) {
                *((off_t *)attrbufptr) = datafork->cf_size + rsrcfork->cf_size;
                attrbufptr = ((off_t *)attrbufptr) + 1;
        }
        if (ATTR_FILE_ALLOCSIZE & attr) {
                *((off_t *)attrbufptr) =
                        (off_t)cattrp->ca_blocks * (off_t)allocblksize;
                attrbufptr = ((off_t *)attrbufptr) + 1;
        }
        if (ATTR_FILE_IOBLOCKSIZE & attr) {
                *((u_int32_t *)attrbufptr) = hfsmp->hfs_logBlockSize;
                attrbufptr = ((u_int32_t *)attrbufptr) + 1;
        }
        if (ATTR_FILE_CLUMPSIZE & attr) {
                *((u_int32_t *)attrbufptr) = hfsmp->vcbClpSiz;
                attrbufptr = ((u_int32_t *)attrbufptr) + 1;
        }
        if (ATTR_FILE_DEVTYPE & attr) {
                if (S_ISBLK(cattrp->ca_mode) || S_ISCHR(cattrp->ca_mode))
                        *((u_int32_t *)attrbufptr) = (u_int32_t)cattrp->ca_rdev;
                else
                        *((u_int32_t *)attrbufptr) = 0;
                attrbufptr = ((u_int32_t *)attrbufptr) + 1;
        }
        if (ATTR_FILE_DATALENGTH & attr) {
                *((off_t *)attrbufptr) = datafork->cf_size;
                attrbufptr = ((off_t *)attrbufptr) + 1;
        }
        if (ATTR_FILE_DATAALLOCSIZE & attr) {
                *((off_t *)attrbufptr) =
                        (off_t)datafork->cf_blocks * (off_t)allocblksize;
                attrbufptr = ((off_t *)attrbufptr) + 1;
        }
        if (ATTR_FILE_RSRCLENGTH & attr) {
                *((off_t *)attrbufptr) = rsrcfork->cf_size;
                attrbufptr = ((off_t *)attrbufptr) + 1;
        }
        if (ATTR_FILE_RSRCALLOCSIZE & attr) {
                *((off_t *)attrbufptr) =
                        (off_t)rsrcfork->cf_blocks * (off_t)allocblksize;
                attrbufptr = ((off_t *)attrbufptr) + 1;
        }
        *abp->ab_attrbufpp = attrbufptr;
        *abp->ab_varbufpp = varbufptr;
}

/*
 * Calculate the total size of an attribute block.
 */
 __private_extern__
int
hfs_attrblksize(struct attrlist *attrlist)
{
        int size;
        attrgroup_t a;
        int sizeof_timespec;
        boolean_t is_64_bit = proc_is64bit(current_proc());
        
    if (is_64_bit) 
        sizeof_timespec = sizeof(struct user_timespec);
    else
        sizeof_timespec = sizeof(struct timespec);

        DBG_ASSERT((attrlist->commonattr & ~ATTR_CMN_VALIDMASK) == 0);

        DBG_ASSERT((attrlist->volattr & ~ATTR_VOL_VALIDMASK) == 0);

        DBG_ASSERT((attrlist->dirattr & ~ATTR_DIR_VALIDMASK) == 0);

        DBG_ASSERT((attrlist->fileattr & ~ATTR_FILE_VALIDMASK) == 0);

        DBG_ASSERT((attrlist->forkattr & ~ATTR_FORK_VALIDMASK) == 0);

        size = 0;
        
        if ((a = attrlist->commonattr) != 0) {
                if (a & ATTR_CMN_NAME) size += sizeof(struct attrreference);
                if (a & ATTR_CMN_DEVID) size += sizeof(dev_t);
                if (a & ATTR_CMN_FSID) size += sizeof(fsid_t);
                if (a & ATTR_CMN_OBJTYPE) size += sizeof(fsobj_type_t);
                if (a & ATTR_CMN_OBJTAG) size += sizeof(fsobj_tag_t);
                if (a & ATTR_CMN_OBJID) size += sizeof(fsobj_id_t);
                if (a & ATTR_CMN_OBJPERMANENTID) size += sizeof(fsobj_id_t);
                if (a & ATTR_CMN_PAROBJID) size += sizeof(fsobj_id_t);
                if (a & ATTR_CMN_SCRIPT) size += sizeof(text_encoding_t);
                if (a & ATTR_CMN_CRTIME) size += sizeof_timespec;
                if (a & ATTR_CMN_MODTIME) size += sizeof_timespec;
                if (a & ATTR_CMN_CHGTIME) size += sizeof_timespec;
                if (a & ATTR_CMN_ACCTIME) size += sizeof_timespec;
                if (a & ATTR_CMN_BKUPTIME) size += sizeof_timespec;
                if (a & ATTR_CMN_FNDRINFO) size += 32 * sizeof(u_int8_t);
                if (a & ATTR_CMN_OWNERID) size += sizeof(uid_t);
                if (a & ATTR_CMN_GRPID) size += sizeof(gid_t);
                if (a & ATTR_CMN_ACCESSMASK) size += sizeof(u_int32_t);
                if (a & ATTR_CMN_FLAGS) size += sizeof(u_int32_t);
                if (a & ATTR_CMN_USERACCESS) size += sizeof(u_int32_t);
                if (a & ATTR_CMN_FILEID) size += sizeof(u_int64_t);
                if (a & ATTR_CMN_PARENTID) size += sizeof(u_int64_t);
        }
        if ((a = attrlist->dirattr) != 0) {
                if (a & ATTR_DIR_LINKCOUNT) size += sizeof(u_int32_t);
                if (a & ATTR_DIR_ENTRYCOUNT) size += sizeof(u_int32_t);
                if (a & ATTR_DIR_MOUNTSTATUS) size += sizeof(u_int32_t);
        }
        if ((a = attrlist->fileattr) != 0) {
                if (a & ATTR_FILE_LINKCOUNT) size += sizeof(u_int32_t);
                if (a & ATTR_FILE_TOTALSIZE) size += sizeof(off_t);
                if (a & ATTR_FILE_ALLOCSIZE) size += sizeof(off_t);
                if (a & ATTR_FILE_IOBLOCKSIZE) size += sizeof(u_int32_t);
                if (a & ATTR_FILE_CLUMPSIZE) size += sizeof(u_int32_t);
                if (a & ATTR_FILE_DEVTYPE) size += sizeof(u_int32_t);
                if (a & ATTR_FILE_DATALENGTH) size += sizeof(off_t);
                if (a & ATTR_FILE_DATAALLOCSIZE) size += sizeof(off_t);
                if (a & ATTR_FILE_RSRCLENGTH) size += sizeof(off_t);
                if (a & ATTR_FILE_RSRCALLOCSIZE) size += sizeof(off_t);
        }

        return (size);
}

#define KAUTH_DIR_WRITE_RIGHTS          (KAUTH_VNODE_ACCESS | KAUTH_VNODE_ADD_FILE | \
                                         KAUTH_VNODE_ADD_SUBDIRECTORY | \
                                         KAUTH_VNODE_DELETE_CHILD)

#define KAUTH_DIR_READ_RIGHTS           (KAUTH_VNODE_ACCESS | KAUTH_VNODE_LIST_DIRECTORY)

#define KAUTH_DIR_EXECUTE_RIGHTS        (KAUTH_VNODE_ACCESS | KAUTH_VNODE_SEARCH)

#define KAUTH_FILE_WRITE_RIGHTS         (KAUTH_VNODE_ACCESS | KAUTH_VNODE_WRITE_DATA)

#define KAUTH_FILE_READRIGHTS           (KAUTH_VNODE_ACCESS | KAUTH_VNODE_READ_DATA)

#define KAUTH_FILE_EXECUTE_RIGHTS       (KAUTH_VNODE_ACCESS | KAUTH_VNODE_EXECUTE)


/*
 * Compute the same [expensive] user_access value as getattrlist does
 */
static u_int32_t
hfs_real_user_access(vnode_t vp, vfs_context_t ctx)
{
        u_int32_t user_access = 0;

        if (vnode_isdir(vp)) {
                if (vnode_authorize(vp, NULLVP, KAUTH_DIR_WRITE_RIGHTS, ctx) == 0)
                        user_access |= W_OK;
                if (vnode_authorize(vp, NULLVP, KAUTH_DIR_READ_RIGHTS, ctx) == 0)
                        user_access |= R_OK;
                if (vnode_authorize(vp, NULLVP, KAUTH_DIR_EXECUTE_RIGHTS, ctx) == 0)
                        user_access |= X_OK;
        } else {
                if (vnode_authorize(vp, NULLVP, KAUTH_FILE_WRITE_RIGHTS, ctx) == 0)
                        user_access |= W_OK;
                if (vnode_authorize(vp, NULLVP, KAUTH_FILE_READRIGHTS, ctx) == 0)
                        user_access |= R_OK;
                if (vnode_authorize(vp, NULLVP, KAUTH_FILE_EXECUTE_RIGHTS, ctx) == 0)
                        user_access |= X_OK;
        }
        return (user_access);
}
                

__private_extern__
unsigned long
DerivePermissionSummary(uid_t obj_uid, gid_t obj_gid, mode_t obj_mode,
                struct mount *mp, kauth_cred_t cred, __unused struct proc *p)
{
        unsigned long permissions;

        if (obj_uid == UNKNOWNUID)
                obj_uid = kauth_cred_getuid(cred);

        /* User id 0 (root) always gets access. */
        if (!suser(cred, NULL)) {
                permissions = R_OK | W_OK | X_OK;
                goto Exit;
        };

        /* Otherwise, check the owner. */
        if (hfs_owner_rights(VFSTOHFS(mp), obj_uid, cred, NULL, false) == 0) {
                permissions = ((unsigned long)obj_mode & S_IRWXU) >> 6;
                goto Exit;
        }

        /* Otherwise, check the groups. */
        if (! (((unsigned int)vfs_flags(mp)) & MNT_UNKNOWNPERMISSIONS)) {
                int is_member;

                if (kauth_cred_ismember_gid(cred, obj_gid, &is_member) == 0 && is_member) {
                        permissions = ((unsigned long)obj_mode & S_IRWXG) >> 3;
                        goto Exit;
                }
        }

        /* Otherwise, settle for 'others' access. */
        permissions = (unsigned long)obj_mode & S_IRWXO;

Exit:
        return (permissions);    
}